Probably should then note using sha256sum to verify the actual image.